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Amendment to the Claims : 

This listing of claims replaces all prior versions, and 
listings, of claims in the application: 

1. (Currently Amended) A method comprising: 
generating information, at first and second points of a 

network, about unwanted communications passing through the first 
and second points from a source and directed to a target device, 
the unwanted communications being that arc adapted to reduce the 
ability of the a target device to respond to other 
communications ; and 

analyzing the information generated at the first and second 
points to identify which of the points first carried the 
unwanted communications. 

2. (Original) The method of claim 1, also including 
detecting the direction of the unwanted communications. 

3. (Original) The method of claim 1, also including 
identifying the target device, 

4. (Original) The method of claim l, also including 
statistically analyzing the communications to determine if an 
uncharacteristically large number of communications have passed 
through at least one of the network points > 

3 
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5. (Original) The method of claim 1, also including 
statistically analyzing the communications to determine when an 
uncharacteristically large number of communications have been 
targeted toward the target device- 

6. (Original) The method of claim 1, also including 
correlating communications request messages with acknowledgement 
messages, 

7. . (Original) The method of claim 1, also including 
communicating information about the unwanted communications to 
brokers . 

8. (Original) The method of claim 7, also including 
communicating information about the unwanted communications 
among brokers. 

9. (Original) The method of claim 1, also including 
blocking a portion of communications passing through the point 
through which the unwanted communications originated, 

10. (Original) The method of claim 9, also including 
blocking a portion of communication request messages passing 
through the point through which the unwanted communications 
originated. 
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11- (Original) The method of claim 1, in which the target 
device comprises a web server. 

12. (Currently Amended) A method comprising: 

monitoring communications passing through at least a firat 

point and a second point on a path from a source sub-network to 
a target device^ 

analyzing the communications passing through the firat and 
second points for indicia of unwanted communi cat ions; 

identifying the «t source sub-network as originating e£ 
unwanted communications that are adapted to reduce the ability 
of a target device on a network to respond to other 
communications, the source suhj-network connected to the network 
through an interface device associated with the first of the at 
least a first point and a second point that carried the unwanted 
communications ; and 

blocking communications passing through the interface 
device . 

13. (Original) The method of claim 12, also including 
blocking a portion of the communications passing through the 
interface device, 

14. (Original) The method of claim 13, also including 
blocking a portion of communication request messages passing 
through the interface device, j 

i 

i 

! 5 

! 
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15. (Canceled) . 

16. (Canceled) . 

17. (Currently Amended) jThe method of claim 12^, also 
including statistically analysing the communications passing 
through the first and second points for an uncharacteristically 
large number of communications passing through either point. 

18. (Currently Amended)! The method of claim 12£, also 
including statistically analysing the communications passing 
through the first and second points for an uncharacteristically 

; * 

1 

large number of communication jrequest messages passing through 
either point . 

i 

i 

19. (Currently Amended) The method of claim 126- , also 

i 

including correlating communication request messages passing 

j 

though the first and second polints with acknowledgement 
messages. 

20. (Currently Amended) A system comprising: 

first and second interface devices for detecting and 

generating information about unwanted communications from a 

1 

; 1 

source passing through the f irjat and second interface devices 

I I 

mcooagco directed to a target device; and 

i 

;i i • 

a communications analyizerj for analyzing the information 

'. : 

•I I ■ 

generated at the first and becbnd interface devices to identify 



6 

:! i 
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i ■ 

which of the interface device^ first carried the unwanted 

i ; 
i : 

communications, :| j 

: i 

' i i 

j i 

21. (Original) The 'sirs t^m of claim 20, in which the 
communications analyzer al£o includes: 

:[ i 

an interface monitor corresponding to each interface 
device ; and 

■! I 

a communications link ;:bet|ween the interface monitors. 

,i ; 

22. (Original) The s^ste|m of claim 21, in which the 
communications analyzer also includes a statistics analyzer 

i 

corresponding to each interface device for statistically 

:| j 

analyzing the messages that pass ^through each interface device. 

23. (Original) The system of claim 22, also including an 
interface coordinator assoqiatjed : with each interface device for 

instructing the interface devilces to block messages. 

j i 

i 

24. (Currently Amended) |A system comprising: 

( i 

a communications monitor jfor detecting and generating 

information about unwanted -jmesisages originating on a first 

network and directed to a dargjet device on a second network ^ the 

; i ~~ 

communications monitor comprising: 

i! i 



,! i 

■; ! 
i 

;; i 

il ! 
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|| I : 

a plurality of interface, monitors between the first 

\ — — - • 

network and the Becond netfrorfc. for monitoring the passage of 

: 1 

unwanted messages therethrouc^ ; 



a localizer coupled I to ; the plurality of interface 

i! i 

monitors to identify the network : point that first carried the 



unwanted messages; and 



a gating module for blocking messages passing through the 

|| j : 

network point identified by the localizer from the first network 

i! I 

to the second network- ji 



25. (Canceled) . 



26 . (Canceled) . 



27. (Currently Amended) iThe system of claim in which 

il j : 1 

the communications monitor ijalejo includes a statistics analyzer 

!j I • " 

for statistically analyzing the messages passing through the 



plurality of points. 



il ! 



28. (Original) The sypteju of claim 24, in which the gating 

ij ! 

module is operable to block a portion of the messages passing 

|j j 

from the first network to ti|he jsecond network* 



29. (Original) The syfetem of claim 28, in which the gating 

i| I ] : 

module is operable to blockj a percentage of all messages passing 
from the first network to tjjhe Lecbnd network. 



a 
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Soil 



30. (Original) The system of claim 28, in which the gating 

i 

module is operable to block a j portion of communication request 

j! .; 

messages directed to the tirget device - 



A computer program embodied in a 
program capable of configuring a 



1 1 

31. (Currently Amended) 

ii 

computer readable medium, the 
computer to: 



generate information, 



!! 

li 



at 



first and second points of a 
network, about unwanted cotfirtlurdcationa from a source passing 
through the first and second points directed to a target device 



that are adapted to reduce jthej ability of the target device to 

ij | 

!i i 

respond to other communi cat ions; and 

• || : :. 

analyze the information generated at the first and second 

jj 

points to identify which o^ the points first carried the 

unwanted communications. jj 

ij 

32. (Original) The prjogram ; of claim 31, also capable of 

| 

configuring a computer to -fcjlock a portion of -the communications 



passing through the point ti'hat 

ji 

. . S 

communications. i< 



first carried the unwanted 



33. (Currently Amendejd) A computer program embodied in a 



carrier wave, the program djapable of configuring a computer to: 



generate information, 



at first and second points of a 

network, about unwanted cofrjnuntLcations from a source passing 

I 

through the £ir3t and secorifl ppints directed to a target device 
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t 

the ability of the a target device to 



respond to other communications; ; and 

i! I ■■ 

analyze the information generated at the first and second 



configuring a computer 



.e joints first carried the 



points to identify which o$ tl 

i 

i 

unwanted communications* j 

34. (Original) The' program :. of claim 33, also capable of 



J ; ■ 

to Bloi 

L 



lock 3 portion of the communications 



passing through the point that! first carried the unwanted 
communications. 



.t 



: ]• 
■i 
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